mpoo8 Privacy Policy

For the purposes of this Policy, the following terms carry the meanings set out below:

mpoo8 collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party service providers where necessary to operate our services securely. The categories of Personal Data we collect are set out below.

2.1 Registration and Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you are at least 21 years of age).
• Indonesian National Identity Card (KTP) number, passport number, or driver's licence (SIM) number.
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta) and postal code.
• Valid email address and Indonesian mobile phone number.
• Username and hashed account credentials.

2.2 Financial and Payment Data

• Bank account details (account name, account number, and bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, or BSI) for processing deposits and withdrawals.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts where used as a payment method.
• Transaction history, including deposit amounts, withdrawal requests, wagering activity, and bonus usage — all denominated in Indonesian Rupiah (IDR).

2.3 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued photo ID (KTP, passport, or SIM).
• Proof of address documents (utility bills, bank statements) dated within the last three months.
• Selfie photographs with ID, submitted to confirm liveness and identity match.

2.4 Technical and Usage Data

• IP address, device type, operating system, browser type, and version.
• Session timestamps, pages visited, game sessions played, and features interacted with on the Platform.
• Cookie identifiers and similar tracking technologies as described in Section 8.
• Geolocation data (country and city level) derived from your IP address, used to apply regional access controls.

2.5 Communications Data

• Records of Live Chat conversations, email correspondence, and WhatsApp messages exchanged with the mpoo8 support team.
• Feedback, complaints, and dispute records submitted through any support channel.
• Marketing preference data — whether you have opted in or out of promotional communications.

mpoo8 processes your Personal Data only for clearly defined, legitimate purposes. The table below sets out each processing purpose alongside the legal basis on which we rely:

mpoo8 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is used (for example, to detect unusual wagering patterns for responsible gaming purposes), it is subject to human oversight and you may request a manual review of any outcome that affects your account.

mpoo8 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These include:

• KYC / Identity Verification Partners — to confirm your identity, age, and document authenticity in accordance with AML requirements.
• Payment Processing Partners — Indonesian local banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) require your account name and number to execute deposit and withdrawal transactions.
• Game Content Providers — studios such as Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and NetEnt receive a pseudonymous player identifier and session token to deliver their games; they do not receive your full name, national ID number, or financial account details.
• Cloud Infrastructure and Hosting Providers — to store Platform data securely on servers protected by SSL 256-bit encryption.
• Customer Support Platform Providers — to facilitate Live Chat and email support ticket management.
• Analytics Providers — to measure Platform performance using aggregated, non-personally-identifiable data where possible.

4.2 Legal and Regulatory Disclosures

mpoo8 will disclose Personal Data to competent courts, law enforcement agencies, or regulatory authorities where required to do so by a valid legal order, subpoena, or applicable law. We will, where legally permitted, notify you of such a request before disclosure.

4.3 Business Transfers

In the event that mpoo8 is involved in a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the successor entity before the transfer takes effect.

mpoo8 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The retention periods we apply are as follows:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation rather than deletion is applied, the resulting data may be retained and used for statistical and analytical purposes indefinitely.

mpoo8 applies a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. The principal security measures we have implemented include:

• SSL 256-Bit Encryption in Transit — All data transmitted between your device and the mpoo8 Platform is encrypted using TLS 1.3 / SSL 256-bit protocols, the same standard adopted by major international financial institutions.
• Encryption at Rest — Sensitive data fields — including national ID numbers, bank account details, and password hashes — are encrypted at the storage layer using industry-standard AES-256 encryption.
• Access Controls — Access to systems that process Personal Data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion Detection and Monitoring — mpoo8 operates continuous network monitoring and intrusion detection systems (IDS) to identify and respond to anomalous activity in real time.
• Penetration Testing — The Platform undergoes regular security assessments and penetration tests conducted by qualified third-party security professionals.
• Incident Response — In the event of a confirmed Personal Data breach that poses a risk to your rights and freedoms, mpoo8 will notify affected players promptly and without undue delay, alongside any applicable regulatory notification obligations.

While mpoo8 employs robust technical and organisational measures, no internet-connected system can be guaranteed to be completely immune from attack. You are responsible for maintaining the security of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As a player on the mpoo8 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team via Live Chat or by emailing [email protected]. We will respond to all verified requests within thirty (30) calendar days.

• Right of Access — You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification — If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as your registered name or date of birth), correction may require re-submission of identity documents.
• Right to Erasure ("Right to Be Forgotten") — You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal obligations — for example, AML record-keeping requirements mean that transaction records must be retained for five years regardless of an erasure request.
• Right to Restriction of Processing — You may request that we limit processing of your Personal Data in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability — Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object — You may object at any time to processing based on our legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — Where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The mpoo8 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your session and preferences, and to collect anonymised analytics data that helps us improve the player experience. The categories of cookies we deploy are:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect your core gaming experience.

mpoo8 operates with service providers located in multiple jurisdictions. Where Personal Data is transferred outside of Indonesia to a country that may not provide an equivalent level of data protection, mpoo8 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by a recognised data protection authority, binding the recipient to data protection obligations equivalent to those described in this Policy.
• Data processing agreements that require third-party processors to implement security measures consistent with those described in Section 6 of this Policy.
• Limiting the scope of data transferred to the minimum necessary for the service provider to perform their contracted function.

By using the mpoo8 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia. mpoo8 takes all reasonable steps to ensure that such transfers are conducted lawfully and with appropriate protections in place.

The mpoo8 Platform is strictly restricted to adults aged 21 years and above. mpoo8 does not knowingly collect, store, or process Personal Data relating to any person under the age of 21. Age verification is enforced at registration and at key account milestones through our KYC programme.

If mpoo8 becomes aware that Personal Data has been collected from a person under 21 — whether through a misrepresentation at registration or otherwise — we will immediately suspend the relevant account, void any associated transactions, return any verifiable deposits to the originating payment method, and permanently delete all Personal Data associated with that individual within thirty (30) days of discovery.

If you believe that a minor has registered an account on the mpoo8 Platform, please notify us immediately at [email protected].

mpoo8 will send you promotional communications — including bonus offers, seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day campaigns), and new game announcements — only if you have explicitly opted in to receive such communications during account registration or subsequently through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you;
• Adjusting your notification preferences in your mpoo8 account settings; or
• Contacting our support team via Live Chat or at [email protected].

Opting out of marketing communications will not affect your ability to use the Platform or to receive transactional communications that are essential to the operation of your account (such as deposit confirmations, withdrawal notifications, and KYC verification requests).

mpoo8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, we will notify registered players by email to the address on file and/or by posting a prominent notice on the Platform homepage, at least seven (7) calendar days before the revised Policy takes effect.

The "Last Updated" date at the top of this page always reflects the date on which the most recent version of the Policy came into effect. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way mpoo8 processes your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link).
• WhatsApp: +62 811 000 8881 (plain text — not a clickable link).
• Support Hours: 00:00–24:00 WIB (UTC+7), every day of the year including public holidays.

mpoo8 aims to acknowledge all privacy-related enquiries within two (2) business hours and to provide a substantive response or resolution within thirty (30) calendar days of receiving a verified request.